结合协商机制的Web服务属性访问控制模型

针对实现有效Web服务访问控制的问题，提出一种结合协商机制的Web服务属性访问控制模型。该模型基于安全断言标记语言和可扩展访问控制标识语言，利用主体属性和上下文属性的组合限制条件，提供细粒度的访问控制。通过加入协商机制，服务请求者可以与服务提供者相互沟通，在访问请求中动态地调整参数信息以获得访问授权。

Attribute Access Control Model for Web Services with Negotiation Mechanism

This paper proposes an attribute-based access control model for Web services with negotiation to provide an effective access control mechanism. The model is based on SAML and XACML and takes the restrictive condition composed of identity attributes and context attributes to provide fine-grained access control. The negotiation ability in the model can make service requester communicate with the service provider and change the parameters in the request to get access to the services.